I'm having difficulty figuring out something that I think should be simple so 
I was hoping some of the talented folk here could help me out:

  Say I've been given the following public, routeable IPs to use:
    123.123.123.10
    123.123.123.11
    123.123.123.12
    123.123.123.13

  And I want to put them all behind the same firewall while assigning the 
  public IPs to the protected machines:

                     +- 123.123.123.11
                     |
    123.123.123.10 --+- 123.123.123.12
                     |
                     +- 123.123.123.13

  Ideally, I'd like to have a number of non-routeable IPs available by way of 
  one of these two options:

                     +- 123.123.123.11
                     |
    123.123.123.10 --+- 123.123.123.12
                     |
                     +- 123.123.123.13
                     |
                     +- 192.168.1.1
                     |
                     +- 192.168.1.2

  OR

                     +- 123.123.123.11
                     |
    123.123.123.10 --+- 123.123.123.12
                     |
                     +- 123.123.123.13 --+- 192.168.1.1
                                         |
                                         +- 192.168.1.2

How do you do this?  Up until recently, I've just assigned all of the 
routeable IPs to the firewall and forwarded the appropriate ports to the 
servers behind -- but ALL the servers behind the firewall are using 
192.168.0.0/16 ips at that stage.

I thought I could just allow Linux to forward the packets, but I couldn't 
figure out the routing since I'm not dealing with a whole subnet, only a few 
allocated IPs.

Someone care to shed some light here?


-- 
the more law and order are made prominent,
the more thieves and robbers there will be.
  - lao-tsu
-- 
[email protected] mailing list

Reply via email to